Evil-DB LogoEvil-DB
← All CVEs

CVE-2002-0640

high · 10

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

10
CVSS
27.3%
EPSS (exploit prob.)
98th
EPSS percentile
2002-07-03
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
openbsdopenssh1.2.2
openbsdopenssh1.2.3
openbsdopenssh2.1
openbsdopenssh2.1.1
openbsdopenssh2.2
openbsdopenssh2.3
openbsdopenssh2.5
openbsdopenssh2.5.1
openbsdopenssh2.5.2
openbsdopenssh2.9
openbsdopenssh2.9.9
openbsdopenssh2.9p1
openbsdopenssh2.9p2
openbsdopenssh3.0
openbsdopenssh3.0.1
openbsdopenssh3.0.1p1
openbsdopenssh3.0.2
openbsdopenssh3.0.2p1
openbsdopenssh3.0p1
openbsdopenssh3.1
openbsdopenssh3.1p1
openbsdopenssh3.2
openbsdopenssh3.2.2p1
openbsdopenssh3.2.3p1
openbsdopenssh3.3
openbsdopenssh3.3p1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-0640